Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/j0_UFRBjhjujkmi8f_PLtJumfB4.roa
File:                     j0_UFRBjhjujkmi8f_PLtJumfB4.roa (raw, json)
Hash identifier:          +Cu+jPrEPtfZ7haLZs/8U4xDQ9avDo43pLSzG8GOV3A=
Subject key identifier:   8F:4F:D4:15:10:63:86:3B:A3:92:68:BC:7F:F3:CB:B4:9B:A6:7C:1E
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       0B
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/j0_UFRBjhjujkmi8f_PLtJumfB4.roa
Signing time:             Thu 13 Oct 2022 06:50:04 +0000
ROA not before:           Thu 13 Oct 2022 06:50:04 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        203.129.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:50:04 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=8F4FD4151063863BA39268BC7FF3CBB49BA67C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:a7:d8:c1:e9:99:e0:0a:c7:cb:b7:ec:d5:
                    54:ea:52:e0:9f:e0:84:23:0f:dd:a3:42:89:52:94:
                    28:ef:92:79:1f:63:de:68:4b:36:04:57:ed:6c:cd:
                    64:8d:a8:a5:6a:11:21:e1:9a:78:a7:bf:f7:00:3e:
                    84:8c:d9:0b:3b:79:eb:c8:08:e6:45:04:b4:5b:10:
                    ea:04:5d:02:66:65:ed:fb:bb:e2:9c:e8:58:87:09:
                    00:cd:5a:da:d5:7e:ac:1b:a0:3b:18:65:ce:83:da:
                    03:f6:ec:50:44:27:94:61:4c:e1:7e:80:8e:02:6b:
                    0d:d5:0e:e7:ca:39:ef:14:f9:10:df:ed:80:d5:f0:
                    6c:b0:b8:44:c9:cf:4c:5e:1d:7a:17:5b:26:4c:60:
                    ee:9f:87:33:bd:f3:c1:dc:db:6f:fb:a9:64:57:24:
                    23:83:c8:04:d4:83:1c:62:20:c5:c4:31:73:7c:60:
                    df:43:34:80:05:11:8c:db:1a:66:90:2b:09:52:19:
                    bb:61:24:4c:64:cb:06:9d:8a:bc:32:c8:bb:5c:67:
                    4d:d5:1a:03:e4:55:f2:01:e0:d2:83:5b:fd:b6:fc:
                    a5:62:99:77:0c:5e:67:9c:f2:6d:d8:ef:5c:db:ac:
                    cc:eb:49:13:62:11:75:86:28:d7:aa:81:53:3f:90:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:D4:15:10:63:86:3B:A3:92:68:BC:7F:F3:CB:B4:9B:A6:7C:1E
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/j0_UFRBjhjujkmi8f_PLtJumfB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:99:db:93:1a:19:5f:9d:e5:fc:62:ae:65:83:ce:13:68:
         08:ba:d2:d6:2b:52:f4:f1:88:03:33:ca:0b:ef:86:3f:ae:3c:
         33:31:28:b3:98:61:58:46:7c:ee:31:1e:56:12:c5:08:d0:21:
         3f:7e:f3:ed:33:9a:d8:68:f9:da:61:98:8e:fe:20:f2:5f:e7:
         f8:42:4c:a5:49:f1:3a:a3:61:d4:27:a5:94:14:ee:d1:cf:8d:
         d2:03:08:71:db:70:76:96:1f:bd:b2:34:93:c7:c7:e0:6c:61:
         6f:0d:1a:40:37:02:50:16:6d:30:ef:a0:a6:e2:2f:ff:53:bd:
         7e:08:ee:d4:4b:f4:a9:0a:a4:3d:a9:2a:af:cd:89:69:34:76:
         47:88:b4:27:9f:b5:ba:9d:10:88:36:c9:cb:50:c6:1c:4d:5a:
         77:cf:bc:ab:40:6c:90:4e:f0:11:a3:26:30:ff:15:f2:e9:44:
         c8:53:16:ed:b8:52:04:e4:5e:8a:47:6f:c9:9e:95:2d:93:8a:
         31:62:f0:54:41:24:ef:d8:98:91:c1:71:d2:63:04:81:ab:63:
         8d:a7:ee:ad:c8:ed:a1:0a:24:e0:83:7d:61:6e:b6:d4:b1:7d:
         d4:25:ca:a2:63:ff:95:6c:7f:62:b5:22:90:05:62:73:b4:71:
         c6:d0:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org